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Determination of Patent Term Adjustment under 35 U.S.C. 154 (b) 

(application filed on or after May 29, 2000) 

The Patent Term Adjustment to date is 729 day(s). If the issue fee is paid on the date that is three months after the 
mailing date of this notice and the patent issues on the Tuesday before the date that is 28 weeks (six and a half 
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If a Continued Prosecution Application (CPA) was filed in the above-identified application, the filing date that 
determines Patent Term Adjustment is the filing date of the most recent CPA. 

Applicant will be able to obtain more detailed information by accessing the Patent Application Information Retrieval 
(PAIR) WEB site (http://pair.uspto.gov). 

Any questions regarding the Patent Term Extension or Adjustment determination should be directed to the Office of 
Patent Legal Administration at (571)-272-7702. Questions relating to issue and publication fee payments should be 
directed to the Customer Service Center of the Office of Patent Publication at l-(888)-786-0101 or 
(571)-272-4200. 
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~ The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 

All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1308. 

1 . |EI This communication is responsive to the amendment filed on 03/18/2009. 

2. The allowed claim(s) is/are 1,3-14,31-38 and 40-46 . 

3. □ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a) □ All b)DSome* c) □ None of the: 

1. □ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. 

4. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

5. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1 ) □ hereto or 2) □ to Paper No./Mail Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mail Date . 

Identifying indicia such as the application number (see 37 CFR 1. 84(c)) should be written on the drawings in the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 

6. □ DEPOSIT OF and/or INFORMATION about the deposit of BIOLOGICAL MATERIAL must be submitted. Note the 

attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL. 



Attachment(s) 

1 . □ Notice of References Cited (PTO-892) 

2. □ Notice of Draftperson's Patent Drawing Review (PTO-948) 

3. S Information Disclosure Statements (PTO/SB/08), 

Paper No./Mail Date 12/05/03. 01/09/09 

4. □ Examiner's Comment Regarding Requirement for Deposit 

of Biological Material 



/Minh Dinh/ 
Examiner, Art Unit 2432 



5. □ Notice of Informal Patent Application 

6. □ Interview Summary (PTO-413), 

Paper No./Mail Date . 

7. ^ Examiner's Amendment/Comment 

8. ^ Examiner's Statement of Reasons for Allowance 

9. □ Other . 
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EXAMINER'S AMENDMENT 

1 . An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1 .312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview 
with Elizabeth J. Zehron 07/01/09. 

The claims have been amended as follows: 
1 . (Currently Amended) A method, implemented in a computing device, the method 
comprising: 

accessing a new security policy to be implemented by a plurality of security engines of 
the computing device and to be implemented by the plurality of security engines in place of a 
current security policy , the plurality of security engines including security engines of at least a 
first type of security engine and a second type of security engine , the new security policy 
including a first set of rules specific to [[a]]the first type of security engine and a second set of 
rules specific to [[a]]the second type of security engine; 

identifying, by a rule set generator of the computing device, which set of rules is used by 
which type of security engine; 

processing, via each of the plurality of security engines, the identified set of rules specific 
to its type to establish new rules for operation of the security engine while the security engine 
continues to operate according to previous rules; 
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returning, via each of the plurality of security engines, a fail value when it determines 
that it has not successfully processed the identified set of rules; 

returning, via each of the plurality of security engines, a pass value when it determines 
that it has successfully processed the identified set of rules; 

receiving an indication to ignore the new set of rules and continue operating each of the 
plurality of security engines according to the previous rules when at least one of the plurality of 
security engines has returned a fail value; and 

switching, after receiving a pass value from each of the plurality of security engines, each 
of the plurality of security engines to the new rules substantially concurrently. 

15-30. (Canceled) 

3 1 . (Currently Amended) One or more computer readable storage media storing one or more 
instructions that, when executed by one or more processors, causes the one or more processors 
to: 

receive information of a new security policy to be used by a plurality of security engineSi 
the plurality of security engines including security engines of at least a first type of security 
engine and a second type of security engine , the new security policy including a first set of rules 
specific to [[a]]the first type of security engine and a second set of rules specific to [[a]]the 
second type of security engine; 

identify, by a rule set generator of the computer readable storage media , which set of 
rules is used by which type of security engines; 
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process, via each of the plurality of security engines, the identified set of rules specific to 
its type to generate new rules having associated data for operation of the security engine; 

use a previous set of rules and associated data when each of the plurality of security 
engines determines that it has not successfully processed the identified set of rules; and 

use, upon receiving an indication that each of the plurality of security engines determines 
that it has successfully processed the identified set of rules, the new set of rules and associated 
data on each of the plurality of security engines substantially concurrently . 

35 . (Currently Amended) One or more computer readable media as recited in claim 3 1 , 
wherein the indication to begin using the new set of rules and associated data is identified 
comprises identifying, in a shared data structure, a value indicating to begin using the new set of 
rules and associated data. 

36. (Currently Amended) One or more computer readable media as recited in claim 3 1 , 
wherein the instructions further cause the one or more processors to begin polling an event, and 
wherein the indication to begin using the new set of rules and associated data is identified 
comprises detecting that the event has been fired. 

40. (Currently Amended) A method, implemented in a security engine of a computing 
device, the method comprising: 

receiving a new security policy to be enforced by a plurality of security engines of the 
computing device , the plurality of security engines including security engines of at least a first 
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type of security engine and a second type of security engine , the new security policy including a 
first set of rules specific to [[a]]the first type of security engine and a second set of rules specific 
to [[a]]the second type of security engine; 

identifying, by a rule set generator of the computing device, which set of rules is used by 
which type of security engines; 

processing, via each of the plurality of security engines, the identified set of rules specific 
to its type to establish new rules for operation of the security engine while the security engine 
continues to operate according to previous rules; and 

enforcing, in response to receipt of an indication that each of the plurality of security 
engines has determined that it has successfully processed the identified set of rules, the new rules 
on each of the plurality of security engines substantially concurrently . 

47-49. (Canceled) 

2. Claims 1 , 31 and 40 are allowable. Claims 5-6, 35-36 and 42-43, previously 
withdrawn from consideration as a result of a restriction requirement, require all the 
limitations of an allowable claim. Pursuant to the procedures set forth in MPEP § 
821.04(a), the restriction requirement among species Ma, Mb and lie, as set forth in 
the Office action mailed on 10/04/07, is hereby withdrawn and claims 5-6, 35-36 and 
42-43 are hereby rejoined and fully examined for patentability under 37 CFR 1 .104. In 
view of the withdrawal of the restriction requirement, applicant(s) are advised that if any 
claim presented in a continuation or divisional application is anticipated by, or includes 



Application/Control Number: 10/729,530 Page 6 

Art Unit: 2432 

all the limitations of, a claim that is allowable in the present application, such claim may 
be subject to provisional statutory and/or nonstatutory double patenting rejections over 
the claims of the instant application. Once the restriction requirement is withdrawn, the 
provisions of 35 U.S. C. 121 are no longer applicable. See In re Ziegler, 443 F.2d 1211, 
1 21 5, 1 70 USPQ 1 29, 1 31 -32 (CCPA 1 971 ). See also MPEP § 804.01 . 

3. The following is an examiner's statement of reasons for allowance. The claimed 
inventions require: a plurality of security engines of a first type and a second type; a 
new security policy including a first set of rules specific to the first type of security 
engine and a second set of rules specific to the second type of security engine; and 
each of the plurality of security engines using/switching to the new rules specific to its 
type substantially concurrently. The closest prior art, Moshir et al. (US 2004/0003266 
A1 ), discloses that a security policy for a plurality of security engines are updated 
according to a scheduled rollout, and when an update installation failure is 
detected/reported, update is removed from all security engines and they rollback to their 
pre-update state. Another prior art, Miliefsky (US 2005/0044418 A1), discloses 
performing security updates and upgrade patches for different plug-in components. The 
prior art, taken either singly or in combination, fails to anticipate or fairly suggest the 
limitations of applicant's independent claim, in such a manner that a rejection under 35 
U.S.C 102 or 103 would be proper. The claimed invention is therefore considered to be 
in condition for allowance as being novel and nonobvious over prior art. 
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Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to MINH DINH whose telephone number is (571)272-3802. 
The examiner can normally be reached on Mon-Fri: 10:00am-6:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Minh Dinh/ 
Examiner, Art Unit 2432 

07/01/09 



